Privacy policy
This covers under2.com — the website you are reading. Systems we build and operate for clients are governed by that client's own policy, not this one.
Who is responsible
Under2 Company Limited, registered in Hanoi under business registration 0107665342 issued on 14/12/2016, is the controller of the personal data described here. Postal address and phone number are on the contact page. Data requests reach us fastest at the address listed there.
What this site collects
There is one place on this website where you can enter personal data: the enquiry form. Nothing else on the page asks for or stores information about you.
| Field | Required | Why it exists |
|---|---|---|
| What you need | Yes | Routes the enquiry to the right person |
| Your name | Yes | So a reply can address you |
| Yes | The reply is sent here | |
| Company | Yes | Answers differ by company size and product type |
| When you want it live | Yes | Determines whether we can take the work |
| Phone, Zalo or WhatsApp | No | Only used if you ask to be called |
| Your current website | No | Lets us look before replying |
| What you use today | No | Shapes the technical answer |
| Budget range | No | Avoids proposing something out of range |
| What is breaking today | No | Free text — send only what you want us to have |
| Call me instead of emailing | No | A preference, not personal data |
The last message box is free text. Please do not paste passwords, API keys, customer lists or anything covered by a confidentiality agreement into it. If you need to send us something sensitive before a contract exists, ask first and we will arrange a proper channel.
What we do not collect
- No analytics. This site runs no Google Analytics, no Tag Manager, no Facebook Pixel, no Hotjar, no Clarity, and no other tracking script.
- No advertising or third-party cookies, and no cross-site tracking.
- No account, no login, no password on this website.
- No fingerprinting scripts. The pages load nothing from outside our own server.
Your browser stores nothing from this site beyond ordinary page caching, and we do not use cookies for tracking of any kind.
Who receives it
A submitted form goes to three places, in this order. The order matters: the first step is a write to our own server, so that a failure at any outside service cannot lose your message.
- Our own server, written to a log file that is not reachable from the web.
- Lark, our internal workspace tool, through a webhook — this is where the team picks the enquiry up.
- Email, delivered through Mailgun, to the mailbox listed on the contact page.
Lark and Mailgun are the only third parties that receive what you send. Neither is given the data for any purpose of their own. We do not sell, rent, share or trade personal data with anyone, and we do not add you to a marketing list because you sent an enquiry.
Where it is stored and for how long
The website and its log file are hosted on a server in Vietnam. Lark and Mailgun process data on their own infrastructure, which may be outside Vietnam.
Enquiry records are kept for 36 months and then deleted. Thirty-six months is chosen deliberately: travel projects often restart after a season or two, and the earlier context saves both sides repeating a conversation. If you would rather it were not kept that long, say so and we will delete it sooner.
Your rights and how to use them
You can ask us for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. There is no form and no fee. Send the request to the address on the contact page from the email address you used, and we will answer within seven working days.
If you ask for deletion, the log entry, the Lark record and the email thread are all removed. We will tell you when it is done rather than leaving you to assume it.
Security
What we actually do to protect this data is described on the security page, including what we do not yet have. We would rather you read the honest version than a paragraph of reassurance.
Client systems are not covered here
Under2 builds and operates booking systems for other companies. When you book a tour on a site running on our software, the travel company is the controller of your data and their privacy policy applies, not this one. We act on their instructions as a processor under the contract we have with them.
If you are not sure which applies, ask the company you booked with, or ask us and we will tell you who to contact.
Changes
This policy takes effect on 9 September 2026. If it changes materially we will publish the new version here with a new effective date rather than editing this one silently.
What travel operators ask us most
Do you use cookies?
Not for tracking. This site sets no analytics, advertising or profiling cookies, and there is no consent banner because there is nothing to consent to.
Will I be added to a mailing list if I send an enquiry?
No. An enquiry is answered by a person and is not treated as a subscription. Under2 does not run a marketing mailing list from this website.
Can I ask you to delete everything?
Yes, at any time and without giving a reason. Email the address on the contact page and we will delete the log entry, the Lark record and the email thread, then confirm that it is done.
Read next
Tell us what you are trying to run
What you sell, what you use today, and what is breaking. You get a written answer with an approach and a price range - not a brochure.